November 18th, 2009, 08:06 AM
#1
I originally posted this on the spyware forumhttp://www.superantispyware.com [email protected] [2].txt[email protected] [2].txt[email protected] [2].txt[email protected] [1].txt[email protected] [1].txt[email protected] [2].txt[email protected] [1].txt[email protected] [1].txt[email protected] [3].txt[email protected] [1].txt[email protected] [2].txt[email protected] [2].txthttp://www.gmer.net
November 18th, 2009, 08:07 AM
#2
hijack log added
Logfile of Trend Micro HijackThis v2.0.2http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://uk.red.clientapps.yahoo.com/c...o/bt_side.html http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://www.creative.com/su/ocx/15031/CTSUEng.cab http://homebase.2020.net/Core/Player...erAX_Win32.cab http://housecall65.trendmicro.com/ho...vex/hcImpl.cab http://www.sis.com/download/SISTransfer.cab http://appldnld.m7z.net/content.info...TunesSetup.exe http://download.bitdefender.com/reso...an8/oscan8.cab http://update.microsoft.com/microsof...?1160671715750 http://help.broadbandassist.com/bbde...ivePreQual.cab http://fpdownload2.macromedia.com/ge...nt/swflash.cab http://drmlicense.one.microsoft.com/.../en/crlocx.ocx http://www.creative.com/su/ocx/15033/CTPID.cab
November 19th, 2009, 01:58 AM
#3
There are definitely some instances of ZA running.http://download.zonealarm.com/bin/fr...cpes_clean.exe
November 19th, 2009, 03:18 PM
#4
Thanks for your reply.
November 20th, 2009, 12:24 AM
#5
Logs show only minor issues (so far).Revo Uninstaller : http://www.revouninstaller.com/
November 20th, 2009, 02:39 PM
#6
Broni, thanks. I tried to use Revo but it couldn't find anything for Zonealarms. I also tried Hunter and Junk files cleaner within Revo but nothing came up.
November 20th, 2009, 11:02 PM
#7
We can try to remove it manually.OTL Custom Scan box paste this in:netsvcs Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows: OTL.txt and Extras.txt . These are saved in the same location as OTL. Please copy (Edit->Select All, Edit->Copy ) the contents of these files, one at a time, and post them back here.
November 21st, 2009, 04:55 AM
#8
Thanks again Broni. I was warned by Windows that OTL was unsafe but went ahead anyway.
Last edited by Clive Wraight; November 21st, 2009 at 05:15 AM .
Reason: extra info added
November 21st, 2009, 09:25 PM
#9
Before we go with OTL, can you check, if Revo will take care of it now (after folder restoration)?
November 22nd, 2009, 04:49 AM
#10
I already tried it. That is why I restored the folder. I just get popup saying No installation package found. Then it says to uninstall manually.
November 22nd, 2009, 02:45 PM
#11
Run OTLUnder the Custom Scans/Fixes
Code:
:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O18 - Protocol\Handler\ipp - No CLSID value found
[2009/11/20 18:50:46 | 00,000,000 | ---D | C] -- C:\Program Files\Zone Labs
[2009/11/19 18:23:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\ZA_PreservedFiles
[2007/01/20 17:30:51 | 00,796,584 | ---- | C] () -- C:\WINDOWS\System32\libeay32_0.9.6l.dll
[2004/10/14 17:38:26 | 00,000,024 | ---- | C] () -- C:\WINDOWS\qfnonl.ini
[2004/10/14 17:37:38 | 00,000,000 | ---- | C] () -- C:\WINDOWS\QFN.ini
[2004/10/14 17:37:38 | 00,000,000 | ---- | C] () -- C:\WINDOWS\QDQICK.ini
:Services
:Reg
:Files
:Commands
[purity]
[emptytemp]
[Reboot]
Then click the Run Fix Let the program run unhindered, reboot the PC when it is done Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
November 22nd, 2009, 03:33 PM
#12
OK here is the new OTL log
November 22nd, 2009, 03:49 PM
#13
November 22nd, 2009, 03:55 PM
#14
Still get the same message that I need to be an administrator. Also I notice I now have 18Gb free space on C drive where I used to only have 9Gb.
November 22nd, 2009, 04:16 PM
#15
Can you post fresh HJT log?
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
[RESOLVED] Free Zonalarm missing and will not reload
Reply With Quote
